NVD

Id
36244  
Name
CVE-2014-9598  
Description
The picture_Release function in misc/picture.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service (write access violation) via a crafted M2V file.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-01-21  
Modified Date
2015-01-22  
Seq
2014-9598  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
185170 36244 CVE-2014-9598 20150116 VLC Media Player 2.1.5 Memory Corruption Vulnerabilities (CVE-2014-9597, CVE-2014-9597)  View
185171 36244 CVE-2014-9598 http://www.binarysniper.net/2015/01/vlc-media-player-215-memory-corruption.html  View
185172 36244 CVE-2014-9598 https://trac.videolan.org/vlc/attachment/ticket/13390/windbglog.txt  View
185173 36244 CVE-2014-9598 https://trac.videolan.org/vlc/ticket/13390  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18872 JVNDB-2014-007747 VideoLAN VLC Media Player の misc/picture_pool.c の picture_Release 関数における任意のコードを実行される脆弱性 VideoLAN VLC Media Player の misc/picture_pool.c の picture_Release 関数には、任意のコードを実行される、またはサービス運用妨害 (書き込みアクセスの違反) 状態にされる脆弱性が存在します。 CVE-2014-9598 76891 CVE-2014-9598 36244 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007747.html 2014-12-26 2015-01-23 View